TrainingPortal - PHP2Shell Vulnerability Mitigations

This incident has been resolved.

This was patched and secured today at 11:00 UK Time.
The TrainingPortal home web page was re-enabled at the same time for individual purchases.
We have also investigated all logs from when the vulnerability was made public and validated that at no point anyone tried to exploit our application.

Following the identification of a PHP vulnerability, we have taken the precautionary measure of temporarily taking the TrainingPortal shop offline while we carry out a comprehensive security review and upgrade the PHP version to ensure the platform remains secure.

As a result, B2C customers accessing the TrainingPortal shop are currently being redirected to a generic landing page until the security checks are complete.

At this stage, no security breaches have been identified. Our monitoring systems remain in place, and we are continuing to investigate and implement the necessary security measures before restoring access to the shop.

The PHP upgrade and associated security checks are expected to be completed shortly. We will restore the public shop as soon as the necessary checks have been completed and we are confident it is safe to bring it back online.

Please note that this issue is limited to the public shop on trainingportal.com.

Protecting our customers and their data is our highest priority, and we will not compromise on security. We appreciate your understanding while we take these precautionary steps to ensure the continued safety of our platform.